Budibase 安全漏洞

Budibase is an open-source platform developed by Budibase in the UK. It allows for the creation of internal applications, workflows, and management panels within minutes. Versions of Budibase prior to 3.39.0 contained security vulnerabilities. These vulnerabilities stemmed from the fact that GET...

Nx Console Embedded Malicious Code Vulnerability

Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory...

PT-2026-44147

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 11.5.17 LTS Pimcore versions prior to 12.3.7 Description Multiple locations in the software call the PHP unserialize function on data retrieved from database columns and filesystem files without using the allowed...

FreeBSD : Grafana -- Public dashboards discloses all direct mode datasources (6b2bf8e9-5900-11f1-b525-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6b2bf8e9-5900-11f1-b525-3c7c3fba4204 advisory. https://grafana.com/security/security-advisories/cve-2026-27877 reports: When using public dashboards a...

PT-2026-43696

Name of the Vulnerable Software and Affected Versions libusb versions prior to 1.0.30 Description A NULL pointer dereference occurs when a malformed USB configuration descriptor is supplied. Specifically, if an interface claims bNumEndpoints greater than zero but is followed by a class-specific...

CVE-2026-46740

Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Version 0.06 changes the module from being a stats...

CVE-2026-45574

creationtimestamp| type| source ---|---|--- 2026-05-26 23:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3xqtamf2e 2026-05-27 01:25:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsdxxcrxo2r...

CVE-2026-5260

creationtimestamp| type| source ---|---|--- 2026-05-26 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3vce4zi2k 2026-05-27 01:00:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsclcm7wc2c 2026-06-29 11:41:21+00:00| seen|...

CVE-2026-9170

creationtimestamp| type| source ---|---|--- 2026-05-26 19:03:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmromuyjiz2i 2026-05-26 19:03:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmromx6rrh2n...

CVE-2026-45728

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is invoked with a single file path instead of a directory, singleFileMode is set to true and debugMode is forcibly enabled. debugMode activates the PrettyError renderer, which on any Lua or template error respon...

GodSearch

󰓾 GodSearch v20.0 — THE SOVEREIGN 💀 Universal Exploit Sear...

CVE-2026-45728 Algernon: Single-file mode unconditionally enables debug mode

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is invoked with a single file path instead of a directory, singleFileMode is set to true and debugMode is forcibly enabled. debugMode activates the PrettyError renderer, which on any Lua or template error respon...

EUVD-2026-31868

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is invoked with a single file path instead of a directory, singleFileMode is set to true and debugMode is forcibly enabled. debugMode activates the PrettyError renderer, which on any Lua or template error respon...

CVE-2026-4480

creationtimestamp| type| source ---|---|--- 2026-05-26 14:33:00+00:00| seen| https://vulnerability.circl.lu/bundle/ef598036-eda2-4311-807e-ebbdfb04a51d 2026-05-26 16:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmreiep6t62r 2026-05-27 02:01:29+00:00| seen|...

Terminus-ai

Terminus-ai a foundation model trainthe entirety of exploit-...

CVE-2026-9543

creationtimestamp| type| source ---|---|--- 2026-05-26 12:26:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116640866055732013 2026-05-26 15:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmrb3wr6jl2q 2026-05-26 15:37:51+00:00| seen|...

CVE-2026-25104

creationtimestamp| type| source ---|---|--- 2026-05-26 09:00:05+00:00| seen| https://infosec.place/objects/7f14540c-11cf-4ebf-b411-9ca39a0aa39c 2026-05-26 09:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116640057248371306 2026-05-26 09:00:32+00:00| seen|...

CVE-2026-8047

creationtimestamp| type| source ---|---|--- 2026-05-26 07:14:55+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmqh22eydtb2 2026-05-26 09:54:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqpxqw5fe2p...

Crypt::ScryptKDF 安全漏洞

Crypt::ScryptKDF is a Perl cryptography module developed by MIK’s individual developers. It supports Scrypt-based key derivation and cryptographic hash processing functions. Versions of Crypt::ScryptKDF prior to 0.010 contained security vulnerabilities, which stemmed from the use of insecure rand...

GHSA-QX2V-QP2M-JG93

creationtimestamp| type| source ---|---|--- 2026-05-25 11:11:11+00:00| seen| https://gist.github.com/konard/0fa64e99614f285a77b6079698b5b5e3 2026-05-25 11:12:19+00:00| seen| https://gist.github.com/konard/649db61832d01e9e237bbf281b033df5 2026-05-30 02:23:48+00:00| seen|...